Hackers stole the private info of 716,000 people throughout a January 2026 intrusion at telehealth platform OpenLoop Well being.
The incident was initially disclosed to the related authorities in March, however the variety of impacted people was added to the US Division of Well being and Human Companies’ breach portal solely this week.
In accordance with notification letters OpenLoop Well being filed with the Legal professional Common’s Places of work in California and Texas, the intrusion was found on January 7.
“An unauthorized third occasion had gained entry to sure OpenLoop methods and eliminated sure info,” the notification reads.
The hackers, it mentioned, had entry to its methods between January 7 and January 8, and stole private info similar to names, addresses, e-mail addresses, delivery dates, and medical knowledge.
“This incident didn’t contain entry to your digital well being document, Social Safety quantity, or monetary account info,” the notification letter reads.
The corporate mentioned it instantly terminated the unauthorized entry and launched an investigation into the matter with help from exterior cybersecurity specialists. It additionally improved its security controls and coordinated with regulation enforcement.
OpenLoop Well being mentioned it was not conscious of any misuse of the stolen private info, however urged the affected people to stay vigilant for fraud and identification theft. The corporate additionally supplied them with one yr of free identification and credit score monitoring providers.
The telehealth platform has not shared info on the risk actor liable for the assault, however a risk actor reportedly claimed the assault earlier this yr, saying they stole the data of 1.6 million people.
Headquartered in Des Moines, Iowa, OpenLoop gives white-label digital well being infrastructure for healthcare and client organizations trying to present digital care.
